AIML Generate images and videos

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is coherent for AIMLAPI image and video generation, with expected cautions around using an API key and sending prompts or input media to an external provider.

This appears safe to install if you intend to generate media with AIMLAPI. Before using it, confirm you are comfortable sharing prompts and any input images with AIMLAPI, and use a dedicated API key with appropriate account limits.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Generated media requests may use the user's AIMLAPI quota, billing, or account permissions.

Why it was flagged

The script uses an AIMLAPI bearer token from the environment or an optional file. This is expected for the service integration, but it gives the skill access to the user's AIMLAPI account.

Skill content
api_key = os.getenv("AIMLAPI_API_KEY") ... key = pathlib.Path(args.apikey_file).read_text(encoding="utf-8").strip() ... "Authorization": f"Bearer {api_key}"
Recommendation

Use a dedicated AIMLAPI key with the minimum needed permissions, keep it out of prompts/logs, and only use --apikey-file with a file that contains the intended AIMLAPI key.

What this means

Text prompts and any input images may be processed by an external provider.

Why it was flagged

Prompts and optional image inputs are sent to AIMLAPI. Local image paths are read and encoded before being included in the remote generation request.

Skill content
DEFAULT_BASE_URL = "https://api.aimlapi.com/v1" ... "prompt": args.prompt ... if args.image_url: img_data = get_base64(args.image_url)
Recommendation

Avoid including secrets, private documents, or sensitive personal data in prompts or input media unless the AIMLAPI account and provider terms are appropriate for that data.